func spExists(sp *netlink.XfrmPolicy) (bool, error) {
    _, err := ns.NlHandle().XfrmPolicyGet(sp)
    switch err {
    case nil:
        return true, nil